https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8090

diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index 703a615f7678be4cfa1d81f181a73da2766714c8..95cbd06d9ca6d299eb75dc853c7d267e640ae44b 100644 (file)
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -1969,7 +1969,8 @@ MagickExport MagickBooleanType DrawImage(Image *image,const DrawInfo *draw_info,
   if (*draw_info->primitive != '@')
     primitive=AcquireString(draw_info->primitive);
   else
-    if (*(draw_info->primitive+1) != '-')
+    if ((strlen(draw_info->primitive) > 1) && 
+        (*(draw_info->primitive+1) != '-'))
       primitive=FileToString(draw_info->primitive+1,~0UL,exception);
   if (primitive == (char *) NULL)
     return(MagickFalse);